Privacy Policy

Last updated: October 3, 2026

In short

Seed Box needs no account and never stores children’s names. Whatever the app saves stays in the browser on your device. There are no ads, no tracking, no analytics, and no cookies. We only receive personal data if you buy a license or email us.

Who is responsible

More details in our legal notice (Impressum).

We follow the EU General Data Protection Regulation (GDPR). Seed Box collects no personal information from or about children – including children under 13 as covered by the U.S. Children’s Online Privacy Protection Act (COPPA).

1. Visiting the website and the app

The website and the app are hosted on our own server with Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen, Germany) in its data center in Helsinki, Finland (EU). When you visit, the server processes the connection data it technically needs – IP address, time, requested file, and browser identifier – only for the duration of the connection. No access logs are kept.

Fonts and all other files come from this server. Nothing is loaded from third parties.

Legal basis: Art. 6(1)(f) GDPR; our legitimate interest is delivering the pages.

2. Data in the app

The app stores the following in the browser’s storage (IndexedDB) on the device: class name (a short label like “3b”), grade, tree, album, weekly box progress, letters read, class records, settings, the date of the last change and backup, and, if entered, the license key. None of it is sent to us or anyone else; we have no access to it.

• Class answers: The table wheel only shows table numbers. Answers and children’s names are not recorded.
• Microphone (only in the game “Flick Takes a Nap”): only after you allow it in the browser. The app measures only the noise level in the moment; nothing is recorded, saved, or sent. When you leave the game, the microphone is released.
• Reading aloud: The app uses the browser’s built-in speech. If the device has no voice of its own, the browser may send the text to its maker’s speech service (for example, Google in Chrome). We have no control over this. You can turn reading aloud off for each class in the teacher menu.
• Backups and class keys are created on the device and stay with the teacher. They contain no children’s names.
• Deleting: You can remove a class in the teacher menu; to delete everything at once, clear the site data in your browser.

Because the app sends no data to us, we do not process any class data on behalf of the school.

3. Buying the full version through Paddle

Our reseller Paddle.com Market Limited (Judd House, 18–29 Mora Street, London EC1V 8BT, United Kingdom) sells the full version as Merchant of Record. Paddle collects the data needed for the purchase, payment, invoice, and taxes – such as name, email address, country, ZIP code, payment details, and tax ID if any – and is responsible for it. See Paddle’s privacy policy.

For each order, Paddle shares with us your name, email address, country, order number, product, and amount. We use this to issue and send your license key, to help with questions and refunds, and for our bookkeeping (Art. 6(1)(b) and (c) GDPR).

4. License keys

A license key contains the license number, license type, date of issue, and the name it was issued to. We keep a register of issued keys with the same details so that we can resend a key and block it after misuse or a refund. The app checks the key on the device only, without contacting us.

5. Email

If you email us, we use your details only to answer your request (Art. 6(1)(b) or (f) GDPR). We send license keys and replies through our email provider mailbox.org (Heinlein Hosting GmbH, Berlin, Germany).

6. How long we keep data

We keep order and invoice data as long as tax and commercial law requires (usually up to ten years). We keep the license key register as long as the license can be used. Emails not related to an order are deleted once the request is resolved.

7. Your rights

You have the right to access, correct, delete, restrict, and port your data, and to object to processing (Art. 15–21 GDPR). Just email lizenz@wunderkammer-apps.de. You can also file a complaint with a data protection authority, for example the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, Germany.